[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] GNU tar directory traversal

Hello,

virus@xxxxxxxxx wrote:
> no. Not agreed. -C is for changing the directory *before processing the 
> remaining arguments*. So, if you don't want tar to overwrite files, you 
> have to use -w.

Siim was right, -w is a workaround. Therefore it is - in opposite to my 
former opinion - a security issue.

Sorry for the noise.

GTi

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/